Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
File:                     28E2707085C2950AF9267465A3801841D8077215.mft (raw, json)
Hash identifier:          qixglO4aYUFUfipep85fihpXiBbXZzA4zHJEMv8n3Ac=
Subject key identifier:   9A:A7:7A:E9:E9:CC:62:82:77:C0:17:94:8E:70:93:60:2E:ED:7D:18
Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15
Certificate issuer:       /CN=28E2707085C2950AF9267465A3801841D8077215
Certificate serial:       51E6006C9ED45B50EAC4375FF62D7AC8C6460A6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
Manifest number:          01B6
Signing time:             Sun 29 Jun 2025 18:41:02 +0000
Manifest this update:     Sun 29 Jun 2025 18:36:02 +0000
Manifest next update:     Wed 02 Jul 2025 23:42:02 +0000
Files and hashes:         1: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: BeLsfpL8RzgYNWSnNvLFv9eVxbvW50/eid911Xh0OPs=)
                          2: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: L5g7ow3d0RUKZKXYB9tfnlObdWYrzccwHNhrPCBOgU8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl
                          rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 23:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e6:00:6c:9e:d4:5b:50:ea:c4:37:5f:f6:2d:7a:c8:c6:46:0a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E2707085C2950AF9267465A3801841D8077215
        Validity
            Not Before: Jun 29 18:36:02 2025 GMT
            Not After : Jul  2 23:42:02 2025 GMT
        Subject: CN=9AA77AE9E9CC628277C017948E7093602EED7D18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:66:34:ad:f6:46:38:07:7a:3f:16:1b:17:
                    38:38:e3:52:0c:5b:a4:e6:0d:1b:fe:67:6e:a5:c6:
                    bc:41:c7:9f:c3:8b:de:88:ed:e8:74:63:01:4b:f7:
                    8f:37:d5:9e:49:59:6f:6f:08:79:c4:f4:ac:b9:0a:
                    7d:b7:d5:2c:3f:1a:d0:33:5b:d9:94:0c:68:7c:2d:
                    82:db:f1:5b:d0:5a:e2:e1:79:5e:c9:4e:d9:22:09:
                    86:e4:52:a3:25:9e:1e:1d:2a:19:2b:53:32:14:88:
                    98:fc:66:53:dc:06:69:55:8e:74:28:d9:2e:29:0a:
                    64:51:0b:b1:a4:2d:37:b7:1d:bd:db:39:5e:4d:a3:
                    a6:42:98:ea:26:83:76:09:f7:f7:72:73:a1:cf:05:
                    d4:e3:a4:a7:e4:03:c1:a7:a4:52:ac:18:3c:2f:cb:
                    ec:2f:f0:d6:2b:59:db:da:f1:90:68:b7:d8:88:9f:
                    76:a1:3e:aa:84:0a:e1:c4:53:1e:01:10:67:5f:3a:
                    b8:c4:a6:1e:ad:b5:06:7e:d3:80:fb:cf:e8:94:c8:
                    c5:da:df:83:d3:cc:5c:73:4b:54:c1:a2:05:5c:8c:
                    ba:30:6f:63:41:40:c8:bc:fb:6f:be:d9:df:48:d5:
                    ca:0b:b4:eb:39:1c:b8:45:96:5d:51:d0:65:3d:ff:
                    39:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A7:7A:E9:E9:CC:62:82:77:C0:17:94:8E:70:93:60:2E:ED:7D:18
            X509v3 Authority Key Identifier:
                keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e3:3f:2f:a9:b0:e4:b0:9d:2d:a3:1f:58:34:ff:b4:4a:11:
         17:a3:03:25:2f:9e:24:a6:bd:d2:7d:9c:f9:2f:f3:e8:35:14:
         d4:ee:6e:47:37:26:80:38:d1:ed:7f:64:cc:f6:77:53:2a:96:
         dc:5d:11:28:07:75:85:9d:36:6f:17:06:13:cd:b5:67:1b:4a:
         cc:4c:9a:90:85:81:6a:05:c8:bf:3b:f4:45:a7:dc:61:48:b9:
         f5:0c:28:a0:18:b6:3d:63:8a:f3:ff:a1:e5:17:f3:99:5c:41:
         ba:b6:58:33:21:15:78:de:8f:0f:bb:98:da:52:95:34:bc:e0:
         16:52:06:8d:0a:bd:ba:ba:2d:7d:b2:f9:67:78:7b:bf:66:ed:
         db:29:14:0a:8a:99:7c:72:21:18:98:14:0d:6c:4b:56:2f:bc:
         d0:3c:eb:30:29:66:65:af:84:ab:5a:5d:01:bc:ae:fd:98:25:
         9f:ab:3e:17:ff:a4:8c:00:86:9a:70:1e:8a:5c:17:2f:9b:81:
         57:26:e6:8f:b4:fe:4b:3a:d1:13:ad:e2:18:2f:fc:5d:39:06:
         0b:f6:6d:b7:95:c9:59:9e:b2:dd:3c:f9:37:17:c8:a7:64:5d:
         cc:a7:ff:6b:25:da:6d:7c:be:14:6a:b9:8f:c6:f0:82:cc:5c:
         90:81:46:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:54:50 2025 by rpki-client